v1.12.0

Caution

There was a bug introduced in v1.12.0 that can cause traffic to be dropped during upgrades - please install v1.12.4

Changes since v1.11

🚨 Breaking or Notable

• Label the webhook service with "app: webhook" label (#14258, @JordanDeBeer)
• auto-tls is now named external-domain-tls (#14472, @ReToCode)
• internal-encryption is now named system-internal-tls (#14472, @ReToCode)
• cluster-local-domain-tls is introduced as a new alpha state flag to control TLS certificates for cluster-local domains (#14472, @ReToCode)
• Traffic from Ingress to Activator/QP uses TLS 1.3 when system-internal-tls is enabled. (#14074, @nak3)
• Validating webhook will now allow adding the NET_BIND_SERVICE or nil capabilities when secure pods defaults feature is enabled (#14445, @kauana)

💫 New Features & Changes

• Allow shareProcessNamespace to be set for a Knative Service (feature flag: kubernetes.podspec-shareprocessnamespace). Disabled by default. (#14454, @rhuss)
• Internal encryption verifies a new SAN kn-user-<ns>. (#14452, @nak3)
• ReadinessProbe with path contains a query string is supported now. (#14273, @nak3)
• Support gRPC probe. (#14134, @seongpyoHong)
• When system-internal-tls is enabled, queue-proxy mounts the certificate secret as projected-volume and automatically reloads the certificates on change. (#14189, @ReToCode)

🐞Bug Fixes

• Activator correctly propagates pod health when triggered by changes other than pod probes. (#14347, @arsenetar)
• Activator no longer cancels all probes when one fails (#14303, @arsenetar)
• Applied an upper bound to the statistics data read from the queue-proxy by the autoscaler. (#14523, @evankanderson)
• Certificate generation errors are bubbled up to its parent Route. (#14496, @gabo1208)
• Fix secure 'secure-pod-defaults' to work with restricted namespaces (#14363, @KauzClay)

Dependencies

Added

• cloud.google.com/go/dataproc/v2: v2.2.0
• github.com/IBM/sarama: v1.40.1
• github.com/alecthomas/kingpin/v2: v2.3.2
• github.com/google/go-pkcs11: c6f7932
• github.com/grafana/regexp: 6b5c0a4
• github.com/hashicorp/errwrap: v1.1.0
• github.com/hashicorp/go-multierror: v1.1.1
• github.com/iancoleman/orderedmap: v0.3.0
• github.com/pierrec/lz4/v4: v4.1.17
• github.com/prashantv/gostub: v1.1.0
• github.com/prometheus/prometheus: v0.47.0
• github.com/stvp/go-udp-testing: 469649b
• github.com/xhit/go-str2duration/v2: v2.1.0
• google.golang.org/genproto/googleapis/bytestream: 8bfb1ae

Changed

• cloud.google.com/go/accessapproval: v1.6.0 → v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.7.0 → v1.8.1
• cloud.google.com/go/aiplatform: v1.37.0 → v1.50.0
• cloud.google.com/go/analytics: v0.19.0 → v0.21.3
• cloud.google.com/go/apigateway: v1.5.0 → v1.6.1
• cloud.google.com/go/apigeeconnect: v1.5.0 → v1.6.1
• cloud.google.com/go/apigeeregistry: v0.6.0 → v0.7.1
• cloud.google.com/go/appengine: v1.7.1 → v1.8.1
• cloud.google.com/go/area120: v0.7.1 → v0.8.1
• cloud.google.com/go/artifactregistry: v1.13.0 → v1.14.1
• cloud.google.com/go/asset: v1.13.0 → v1.14.1
• cloud.google.com/go/assuredworkloads: v1.10.0 → v1.11.1
• cloud.google.com/go/automl: v1.12.0 → v1.13.1
• cloud.google.com/go/baremetalsolution: v0.5.0 → v1.2.0
• cloud.google.com/go/batch: v0.7.0 → v1.4.1
• cloud.google.com/go/beyondcorp: v0.5.0 → v1.0.0
• cloud.google.com/go/bigquery: v1.50.0 → v1.55.0
• cloud.google.com/go/billing: v1.13.0 → v1.17.0
• cloud.google.com/go/binaryauthorization: v1.5.0 → v1.7.0
• cloud.google.com/go/certificatemanager: v1.6.0 → v1.7.1
• cloud.google.com/go/channel: v1.12.0 → v1.17.0
• cloud.google.com/go/cloudbuild: v1.9.0 → v1.14.0
• cloud.google.com/go/clouddms: v1.5.0 → v1.7.0
• cloud.google.com/go/cloudtasks: v1.10.0 → v1.12.1
• cloud.google.com/go/compute: v1.19.1 → v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.6.0 → v1.10.0
• cloud.google.com/go/container: v1.15.0 → v1.26.0
• cloud.google.com/go/containeranalysis: v0.9.0 → v0.11.0
• cloud.google.com/go/datacatalog: v1.13.0 → v1.17.1
• cloud.google.com/go/dataflow: v0.8.0 → v0.9.1
• cloud.google.com/go/dataform: v0.7.0 → v0.8.1
• cloud.google.com/go/datafusion: v1.6.0 → v1.7.1
• cloud.google.com/go/datalabeling: v0.7.0 → v0.8.1
• cloud.google.com/go/dataplex: v1.6.0 → v1.9.1
• cloud.google.com/go/dataqna: v0.7.0 → v0.8.1
• cloud.google.com/go/datastore: v1.11.0 → v1.14.0
• cloud.google.com/go/datastream: v1.7.0 → v1.10.0
• cloud.google.com/go/deploy: v1.8.0 → v1.13.0
• cloud.google.com/go/dialogflow: v1.32.0 → v1.43.0
• cloud.google.com/go/dlp: v1.9.0 → v1.10.1
• cloud.google.com/go/documentai: v1.18.0 → v1.22.1
• cloud.google.com/go/domains: v0.8.0 → v0.9.1
• cloud.google.com/go/edgecontainer: v1.0.0 → v1.1.1
• cloud.google.com/go/essentialcontacts: v1.5.0 → v1.6.2
• cloud.google.com/go/eventarc: v1.11.0 → v1.13.0
• cloud.google.com/go/filestore: v1.6.0 → v1.7.1
• cloud.google.com/go/firestore: v1.9.0 → v1.13.0
• cloud.google.com/go/functions: v1.13.0 → v1.15.1
• cloud.google.com/go/gkebackup: v0.4.0 → v1.3.1
• cloud.google.com/go/gkeconnect: v0.7.0 → v0.8.1
• cloud.google.com/go/gkehub: v0.12.0 → v0.14.1
• cloud.google.com/go/gkemulticloud: v0.5.0 → v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.5.0 → v1.6.1
• cloud.google.com/go/iam: v1.0.1 → v1.1.2
• cloud.google.com/go/iap: v1.7.1 → v1.9.0
• cloud.google.com/go/ids: v1.3.0 → v1.4.1
• cloud.google.com/go/iot: v1.6.0 → v1.7.1
• cloud.google.com/go/kms: v1.10.1 → v1.15.2
• cloud.google.com/go/language: v1.9.0 → v1.11.0
• cloud.google.com/go/lifesciences: v0.8.0 → v0.9.1
• cloud.google.com/go/logging: v1.7.0 → v1.8.1
• cloud.google.com/go/longrunning: v0.4.1 → v0.5.1
• cloud.google.com/go/managedidentities: v1.5.0 → v1.6.1
• cloud.google.com/go/maps: v0.7.0 → v1.4.0
• cloud.google.com/go/mediatranslation: v0.7.0 → v0.8.1
• cloud.google.com/go/memcache: v1.9.0 → v1.10.1
• cloud.google.com/go/metastore: v1.10.0 → v1.12.0
• cloud.google.com/go/monitoring: v1.13.0 → v1.16.0
• cloud.google.com/go/networkconnectivity: v1.11.0 → v1.13.0
• cloud.google.com/go/networkmanagement: v1.6.0 → v1.9.0
• cloud.google.com/go/networksecurity: v0.8.0 → v0.9.1
• cloud.google.com/go/notebooks: v1.8.0 → v1.10.0
• cloud.google.com/go/optimization: v1.3.1 → v1.5.0
• cloud.google.com/go/orchestration: v1.6.0 → v1.8.1
• cloud.google.com/go/orgpolicy: v1.10.0 → v1.11.1
• cloud.google.com/go/osconfig: v1.11.0 → v1.12.1
• cloud.google.com/go/oslogin: v1.9.0 → v1.10.1
• cloud.google.com/go/phishingprotection: v0.7.0 → v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.6.0 → v1.9.0
• cloud.google.com/go/privatecatalog: v0.8.0 → v0.9.1
• cloud.google.com/go/pubsub: v1.30.0 → v1.33.0
• cloud.google.com/go/pubsublite: v1.7.0 → v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.0 → v2.7.2
• cloud.google.com/go/recommendationengine: v0.7.0 → v0.8.1
• cloud.google.com/go/recommender: v1.9.0 → v1.11.0
• cloud.google.com/go/redis: v1.11.0 → v1.13.1
• cloud.google.com/go/resourcemanager: v1.7.0 → v1.9.1
• cloud.google.com/go/resourcesettings: v1.5.0 → v1.6.1
• cloud.google.com/go/retail: v1.12.0 → v1.14.1
• cloud.google.com/go/run: v0.9.0 → v1.2.0
• cloud.google.com/go/scheduler: v1.9.0 → v1.10.1
• cloud.google.com/go/secretmanager: v1.10.0 → v1.11.1
• cloud.google.com/go/security: v1.13.0 → v1.15.1
• cloud.google.com/go/securitycenter: v1.19.0 → v1.23.0
• cloud.google.com/go/servicedirectory: v1.9.0 → v1.11.0
• cloud.google.com/go/shell: v1.6.0 → v1.7.1
• cloud.google.com/go/spanner: v1.45.0 → v1.49.0
• cloud.google.com/go/speech: v1.15.0 → v1.19.0
• cloud.google.com/go/storage: v1.30.1 → v1.33.0
• cloud.google.com/go/storagetransfer: v1.8.0 → v1.10.0
• cloud.google.com/go/talent: v1.5.0 → v1.6.2
• cloud.google.com/go/texttospeech: v1.6.0 → v1.7.1
• cloud.google.com/go/tpu: v1.5.0 → v1.6.1
• cloud.google.com/go/trace: v1.9.0 → v1.10.1
• cloud.google.com/go/translate: v1.7.0 → v1.9.0
• cloud.google.com/go/video: v1.15.0 → v1.20.0
• cloud.google.com/go/videointelligence: v1.10.0 → v1.11.1
• cloud.google.com/go/vision/v2: v2.7.0 → v2.7.2
• cloud.google.com/go/vmmigration: v1.6.0 → v1.7.1
• cloud.google.com/go/vmwareengine: v0.3.0 → v1.0.0
• cloud.google.com/go/vpcaccess: v1.6.0 → v1.7.1
• cloud.google.com/go/webrisk: v1.8.0 → v1.9.1
• cloud.google.com/go/websecurityscanner: v1.5.0 → v1.6.1
• cloud.google.com/go/workflows: v1.10.0 → v1.12.0
• cloud.google.com/go: v0.110.2 → v0.110.8
• contrib.go.opencensus.io/exporter/prometheus: v0.4.0 → v0.4.2
• github.com/Shopify/sarama: v1.30.0 → v1.19.0
• github.com/alecthomas/jsonschema: f2c9385 → 9eeeec9
• github.com/alecthomas/units: f65c72e → b94a6e3
• github.com/bmizerany/perks: d9a9656 → 03f9df7
• github.com/c2h5oh/datasize: 28bbd47 → 859f65c
• github.com/coreos/go-systemd/v22: v22.3.2 → v22.4.0
• github.com/dgryski/go-lttb: 318fcdf → f8fc36c
• github.com/eapache/go-resiliency: v1.2.0 → v1.3.0
• github.com/eapache/go-xerial-snappy: 776d571 → bf00bc1
• github.com/envoyproxy/go-control-plane: 9239064 → v0.11.1
• github.com/envoyproxy/protoc-gen-validate: v0.10.1 → v1.0.2
• github.com/evanphx/json-patch/v5: v5.6.0 → v5.7.0
• github.com/go-kit/log: v0.2.0 → v0.2.1
• github.com/go-logr/logr: v1.2.3 → v1.2.4
• github.com/go-openapi/jsonpointer: v0.19.5 → v0.19.6
• github.com/go-openapi/jsonreference: v0.20.0 → v0.20.1
• github.com/go-task/slim-sprig: 348f09d → 52ccab3
• github.com/gobuffalo/flect: v0.2.4 → v1.0.2
• github.com/google/cel-go: v0.12.6 → v0.12.7
• github.com/google/go-cmp: v0.5.9 → v0.6.0
• github.com/google/pprof: 1a94d86 → 4bb14d4
• github.com/google/s2a-go: v0.1.4 → v0.1.7
• github.com/google/uuid: v1.3.0 → v1.3.1
• github.com/googleapis/enterprise-certificate-proxy: v0.2.3 → v0.3.1
• github.com/googleapis/gax-go/v2: v2.9.1 → v2.12.0
• github.com/gorilla/websocket: v1.4.2 → v1.5.0
• github.com/hashicorp/go-uuid: v1.0.2 → v1.0.3
• github.com/hashicorp/golang-lru: v0.5.4 → v1.0.2
• github.com/jcmturner/gofork: v1.0.0 → v1.7.6
• github.com/jcmturner/gokrb5/v8: v8.4.2 → v8.4.3
• github.com/klauspost/compress: v1.15.11 → v1.16.6
• github.com/kr/pretty: v0.3.0 → v0.3.1
• github.com/matttproud/golang_protobuf_extensions: v1.0.2 → v1.0.4
• github.com/miekg/dns: v1.1.41 → v1.1.56
• github.com/onsi/ginkgo/v2: v2.4.0 → v2.11.0
• github.com/onsi/ginkgo: v1.16.5 → v1.7.0
• github.com/onsi/gomega: v1.23.0 → v1.27.10
• github.com/openzipkin/zipkin-go: v0.3.0 → v0.4.2
• github.com/pierrec/lz4: v2.6.1+incompatible → 473cd7c
• github.com/prometheus/client_golang: v1.14.0 → v1.17.0
• github.com/prometheus/client_model: v0.3.0 → 9a2bf30
• github.com/prometheus/common: v0.37.0 → v0.44.0
• github.com/prometheus/procfs: v0.8.0 → v0.11.1
• github.com/prometheus/statsd_exporter: v0.21.0 → v0.22.7
• github.com/rabbitmq/amqp091-go: v1.1.0 → v1.8.1
• github.com/rogpeppe/go-internal: v1.9.0 → v1.11.0
• github.com/streadway/quantile: b0c5887 → 4246515
• github.com/tmc/grpc-websocket-proxy: e5319fd → 673ab2c
• github.com/tsenart/vegeta/v12: v12.8.4 → v12.11.1
• go.etcd.io/etcd/api/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/client/pkg/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/client/v2: v2.305.5 → v2.305.7
• go.etcd.io/etcd/client/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/pkg/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/raft/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/server/v3: v3.5.5 → v3.5.7
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.35.0 → v0.35.1
• go.uber.org/automaxprocs: v1.4.0 → v1.5.3
• go.uber.org/goleak: v1.2.0 → v1.2.1
• go.uber.org/multierr: v1.6.0 → v1.10.0
• go.uber.org/zap: v1.19.1 → v1.26.0
• golang.org/x/crypto: v0.11.0 → v0.14.0
• golang.org/x/exp: 6cc2880 → 613f0c0
• golang.org/x/mod: v0.9.0 → v0.13.0
• golang.org/x/net: v0.12.0 → v0.17.0
• golang.org/x/oauth2: v0.8.0 → v0.13.0
• golang.org/x/sync: v0.2.0 → v0.4.0
• golang.org/x/sys: v0.10.0 → v0.13.0
• golang.org/x/term: v0.10.0 → v0.13.0
• golang.org/x/text: v0.11.0 → v0.13.0
• golang.org/x/tools: v0.7.0 → v0.14.0
• gomodules.xyz/jsonpatch/v2: v2.2.0 → v2.4.0
• google.golang.org/api: v0.124.0 → v0.147.0
• google.golang.org/genproto/googleapis/api: 1aefcd6 → d307bd8
• google.golang.org/genproto/googleapis/rpc: 9506855 → 8bfb1ae
• google.golang.org/genproto: 438c736 → d307bd8
• google.golang.org/grpc: v1.56.1 → v1.58.3
• k8s.io/api: v0.26.5 → v0.27.6
• k8s.io/apiextensions-apiserver: v0.26.5 → v0.27.6
• k8s.io/apimachinery: v0.26.5 → v0.27.6
• k8s.io/apiserver: v0.26.5 → v0.27.6
• k8s.io/client-go: v0.26.5 → v0.27.6
• k8s.io/code-generator: v0.26.5 → v0.27.6
• k8s.io/component-base: v0.26.5 → v0.27.6
• k8s.io/klog/v2: 9ae4992 → v2.90.1
• k8s.io/kms: v0.26.5 → v0.27.6
• k8s.io/kube-openapi: 172d655 → 8b0f38b
• k8s.io/utils: 8e77b1f → a36077c
• knative.dev/caching: 24ff723 → 54d0758
• knative.dev/hack: ddae802 → 2c938d4
• knative.dev/networking: 75dcd54 → 2a7676e
• knative.dev/pkg: aef227e → 29775d7
• pgregory.net/rapid: v0.3.3 → v1.1.0
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.37 → v0.1.2
• sigs.k8s.io/json: f223a00 → bc3834c

Removed

• cloud.google.com/go/dataproc: v1.12.0
• cloud.google.com/go/gaming: v1.9.0
• github.com/PuerkitoBio/purell: v1.1.1
• github.com/PuerkitoBio/urlesc: de5bf2a
• github.com/Shopify/toxiproxy/v2: 15ea381
• github.com/benbjohnson/clock: v1.1.0
• github.com/elazarl/goproxy: 947c36d
• github.com/form3tech-oss/jwt-go: v3.2.3+incompatible
• github.com/fortytw2/leaktest: v1.3.0
• github.com/frankban/quicktest: v1.11.3
• github.com/gonum/blas: f22b278
• github.com/gonum/diff: 500114f
• github.com/gonum/floats: c233463
• github.com/gonum/integrate: a422b5c
• github.com/gonum/internal: f884aa7
• github.com/gonum/lapack: e4cdc5a
• github.com/gonum/mathext: 8a4bf00
• github.com/gonum/matrix: c518dec
• github.com/gonum/stat: 41a0da7
• github.com/gorilla/securecookie: v1.1.1
• github.com/gorilla/sessions: v1.2.1
• github.com/jcmturner/goidentity/v6: v6.0.1
• github.com/niemeyer/pretty: a10e7ca
• github.com/nxadm/tail: v1.4.8
• github.com/urfave/cli/v2: v2.3.0
• github.com/xdg-go/pbkdf2: v1.0.0
• github.com/xdg-go/scram: v1.0.2
• github.com/xdg-go/stringprep: v1.0.2